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Top Stories 

• New York officials conducted an inspection September 14 on rail cars and tracks across the 
State and found 95 defects. - Albany Times Union (See item 8) 

• Classes were cancelled September 15 at Delta State University in Mississippi after a 
teacher shot and killed his live-in girlfriend September 14 and then shot and killed another 
teacher at the university’s Cleveland campus before dying from a self-inflicted gunshot 
wound - Jackson Clarion-Ledger; USA Today (See item 13) 

• Two high school students in Houston, Texas, were killed and 2 others were hurt along with 
the bus driver September 15 after their school bus was involved in an accident. - Houston 
Chronicle (See item 14) 

• Security researchers discovered attacks across multiple industries and government agencies 
on 3 continents in which Cisco 1841, 2811, and 3825 routers were implanted with the 
SYNful Knock malware. - Reuters (See item 21) 
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Energy Sector 



1. September 14, Springfield State Journal-Register - (Illinois) Settlement reached in 
Carlinville mine contamination case. Macoupin Energy LLC reached a settlement 
September 14 with the Illinois attorney general’s office resolving groundwater-quality 
violations at the Shay No. 1 Coal Mine in Macoupin County, requiring the company to 
pay a $100,000 civil penalty, fund 2 supplemental environmental projects, and prevent 
the spread of mining waste contaminants from 2 disposal areas into groundwater. 
Source: http://www.si-r.com/article/20150914/NEWS/15Q919747 

2. September 14, Associated Press - (Pennsylvania) Pennsylvania agency announces 
$2.5M settlement over spill. The Pennsylvania Fish and Boat Commission reached a 
$2.5 million settlement September 14 with Murray Energy over a September 2009 spill 
of discharge from coal mine into Dunkard Creek, killing an estimated 43,000 fish, 
15,000 mussels, and 6,500 mudpuppies. The energy company stated that it was not 
involved in the event, and blamed the discharge on a naturally occurring golden algae 
bloom. 

Source: http://www.iournalreview.com/news/article 93dd7ab5-feeb-5ab2-bda2- 
aa6839c4c82f.html 



Chemical Industry Sector 

3. September 14, KPRC 2 Houston - (Texas) Chemical leak at plant near Pasadena. 
Texas officials reported September 14 that an unknown amount of propylene leaked 
from the Flint Hill Resources Houston plant, prompting a controlled shutdown while 
HAZMAT crews and emergency responders cleaned and repaired the leak. All 
employees were accounted for and no injuries were reported. 

Source: http://www.click2houston.com/news/chemical-leak-at-plant-near- 
pasadena/35266258 

Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 

Critical Manufacturing Sector 

Nothing to report 

Defense Industrial Base Sector 

Nothing to report 

Financial Services Sector 

4. September 15, Denver Post - (Colorado) FirstBank warns customers some local 
ATMs had illegal “skimmers.” FirstBank notified an undetermined number of 
customers that their accounts may have been breached after the bank found skimming 
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devices on ATMs inside grocery stores at University Blvd in Englewood, E. Ninth 
Avenue in Denver, and 30 th Street in Boulder. The bank has issued new cards to users 
and older cards will no longer work starting September 15. 

Source: http://www.denverpost.com/business/ci 2881 1727/firstbank-wams-customers- 
some-local-atms-had-illegal 

5. September 14 , Reuters - (National) U.S. charges two more in multimillion-dollar 
text message fraud. Two men were charged on September 14 for allegedly helping a 
“cramming” scheme which involved charging thousands of unsuspecting mobile phone 
users $9.99 a month for unsolicited texts from 2011 - 2013 by using their positions as 
mobile aggregator executives to continue and protect the scheme. Six other suspects 
were previously charged in connection to the scheme. 

Source: http://www.reuters.com/article/2015/09/14/usa-crime-textmessaging- 
idUSLlNllKlYX20150914 

Transportation Systems Sector 

6. September 15, Atlanta Journal-Constitution - (Georgia) Two people die in fiery 
wreck on Ga. 316 in Oconee County. Eastbound lanes of Ga. 316 in Oconee County 
were shut down for approximately 6 hours September 14 after a fatal collision occurred 
when a vehicle rear ended a semi-truck hauling a large spool of paper, causing 1 
vehicle to catch fire. Both the driver and passenger in the vehicle died at the scene. 
Source: http://www.aic.com/news/news/state-regional/two-dead-in-wreck-on-ga-316- 
in-oconee-county/nnfbr/ 

7. September 14, WCB1 15 Columbus - (Alabama) Highway 82 reopens in Pickens 
County, Alabama. Highway 82 in Pickens County, Alabama reopened September 14 
after closing for several hours when a semi-truck carrying 9,000 gallons of fuel 
overturned and spilled up to 300 gallons of fuel onto the roadway. The driver was sent 
to a surrounding hospital and officials reported clean-up efforts were in process. 

Source: http://www.wcbi.com/local-news/gasoline-tanker-overtums-in-pickens-county- 
highway-82-shutdown/ 

8. September 14, Albany Times Union - (New York) Inspectors find four ‘critical’ 
safety defects on CSX tracks. New York Department of Transportation and the U.S. 
Federal Railroad Administration conducted an inspection September 14 on rail cars and 
tracks across the State and found 95 defects, 4 of which were considered critical 
including damaged hazardous materials placards, thin brake shoes, and inoperative 
lights, among other findings. Railroads were given 30 days to repair noncritical defects. 
Source: http://blog.timesunion.com/business/inspectors-find-four-critical-safetv- 
defects-on-csx-tracks/68925/ 



Food and Agriculture Sector 



9. September 14, WTOP 103.5 Washington - (Virginia) Two charged with Harris 
Teeter bomb threats. Police authorities reported September 14 that 2 men were 
arrested and charged September 1 1 for a series of alleged bomb threats targeting a 
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Harris Teeter in Alexandria, Virginia, after the grocery store received five bomb threats 
from April - July, prompting all customers and employees to evacuate during each 
occurrence. 

Source: http://wtop.com/alexandria/2015/09/two-charged-with-harris-teeter-bomb- 
threats/ 



For another story, see item 2 

Water and Wastewater Systems Sector 

10. September 15, Cherokee County News Advocate - (Kansas) Boil water advisory 
issued for Cherokee County. The Kansas Department of Health and Environment 
issued a boil water advisory September 15 for residents in Cherokee County, Kansas, 
after a planned loss of pressure was scheduled due to system maintenance. The 
advisory will be in effect until pressure is restored and all other conditions are deemed 
resolved. 

Source: http://www.sekvoice.com/sekvoice/article 77c57bf2-239d-55db-8531- 
773d03a48a61.html 



11. September 15, WIS 10 Columbia - (South Carolina) Boil water advisory issued for 
Ripley Station Road. The City of Columbia Water Works issued a boil water advisory 
September 14 for residents in Lexington County, South Carolina after an 8-inch water 
line ruptured in nearby areas. Crews were working to repair the break. 

Source: http://www.wistv.com/storv/30029244/boil-water-advisory-issued-for-riplev- 
station-road 



12. September 14, Nexstar Broadcasting Group - (Iowa) Power outage causes 

wastewater discharge in Burlington. Burlington, Iowa officials reported September 
14 that its wastewater treatment plant discharged 27,000 gallons of partially treated 
wastewater into the Mississippi River September 12 after a power outage shut off all 
pumps, causing the wastewater to fill and overflow from the processing tanks. An 
investigation remains ongoing to determine why the breaker tripped and how to 
mitigate future occurrences. 

Source: http://www.ourquadcities.com/news/power-outage-causes-wastewater- 
discharge-in-burlington 

For additional stories, see items 1 and 2 

Healthcare and Public Health Sector 

Nothing to report 

Government Facilities Sector 



13. September 15, Jackson Clarion-Ledger; USA Today - (Mississippi) Police: Delta State 
killer turned gun on himself. Classes were cancelled September 15 at Delta State 
University in Mississippi after a teacher shot and killed his live-in girlfriend in Gautier 
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September 14 and then shot and killed another teacher at the university’s Cleveland 
campus before apparently dying from a self-inflicted gunshot wound when he was 
confronted by police. The university was placed on lockdown and students were 
dismissed while police pursued the teacher. 

Source: http://www.usatodav.com/storv/news/nation/2015/09/14/mississippi-shooter- 
delta-state-university/72255856/ 



14. September 15, Houston Chronicle - (Texas) 2 students dead, 2 others and bus driver 
injured as school bus plummets from 610 loop in Houston. Two Furr High School 
students were killed and 2 others were hurt along with the bus driver September 15 
after their school bus reportedly overcorrected when it was struck by another vehicle 
and careened from the overpass, plunging from the 640 Loop in southeast Houston. 
Source: http://www.msn.com/en-us/news/us/school-bus-crash-along-south-loop/ar- 
AAejauv 

15. September 15, Charlotte Observer - (North Carolina) CMS alerts 7,600 job 
applicants to personal data breach. Charlotte-Mecklenburg Schools in North 
Carolina notified approximately 7,600 job applicants September 11 that their personal 
information, including Social Security numbers, were destroyed after being 
inadvertently shared with an outside contractor without prior consent. The district 
reported September 15 that one of its employees entered into an agreement with a third- 
party vendor without obtaining appropriate authorization, and released confidential data 
without consent. 

Source: http://www.charlotteobserver.com/news/local/education/article35300451.html 

16. September 14, KGO 7 San Francisco - (California) Resources: Valley Fire 
evacuation centers, school closures in Lake County, Napa County. Several school 
districts in Lake and Napa counties in California were closed September 15 through 
September 21 due to the Valley Fire which has destroyed at least 1,000 homes and 
forced more than 17,000 people to evacuate. 

Source: http://abc7news.com/news/vallev-fire-evacuation-centers-school-closures — 
resources-and%20info/982676/ 



17. September 14, Torrance Daily Breeze - (California) Report of white powder in 
envelope forces evacuation of Inglewood courthouse. The Inglewood courthouse in 
California was evacuated for more than 2 hours September 14 after an individual felt a 
burning sensation when coming into contact with an envelope containing an unknown 
white powder. Fourteen people were decontaminated before authorities determined that 
the envelope did not contain a hazardous substance. 

Source: http://www.dailybreeze.com/general-news/20150914/report-of-white-powder- 
in-envelope-forces-evacuation-of-inglewood-courthouse 

18. September 14, WLKY 32 Louisville - (Kentucky) Six children taken to hospital 
following school bus accident. Six students were transported to an area hospital with 
minor injuries after a Jefferson County Public School bus hit another vehicle on the 
ramp from Taylor Boulevard to the Watterson Expressway in Louisville September 14. 
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Source: http://www.wlkv.com/news/iniurv-accident-involving-icps-bus-at-tavlor-blvd- 
i264/35260576 



For another story, see item 21 

Emergency Services Sector 

Nothing to report 

Information Technology Sector 

19. September 15, Help Net Security - (International) The rise of repeated “low and 
slow” DDoS attacks. Neustar released research findings revealing an increase in small, 
repeated distributed denial-of-service (DDoS) attacks from 2014 to early 2015, with 54 
percent of companies surveyed being hit by at least 6 attacks. Research also found that 
the duration of DDoS attacks is increasing, with 10 percent of attacks lasting about a 
week, among other findings. 

Source: http://www.net-securitv.org/secworld.php ?id=l 8853 

20. September 15, Securityweek - (International) Popular mobile travel apps have 
critical security issues: Report. Bluebox Security released report findings revealing 
that the top ten most popular mobile travel applications contain critical flaws, including 
failures to encrypt sensitive data stored on mobile devices, a lack of certificate pinning 
which leaves users vulnerable to man-in-the-middle (MitM) attacks, and a lack of anti- 
tampering measures, among other findings. 

Source: http://www.securitvweek.com/popular-mobile-travel-apps-have-critical- 
securit y-is sues -report 

21. September 15, Reuters - (International) Cisco router break-ins bypass cyber 
defenses. Security researchers from FireEye discovered attacks in August across 
multiple industries and government agencies on three continents in which Cisco 1841, 
2811, and 3825 routers were implanted with the sophisticated SYNful Knock malware, 
which can duplicate normal router functions and jump from router to router using 
device syndication functions. Researchers believe attackers accessed the devices by 
stealing valid network administration credentials or by gaining direct physical access. 
Source: http://www.reuters.com/article/2015/09/15/us-cybersecuritv-routers-cisco- 
svstems-idUSKCN0RF0N420 150915 



22. September 14, Securityweek - (International) TLS communications exposed to KCI 
attacks: Researchers. Security researchers from Research Industrial Systems 
Engineering revealed that a flaw in the Transport Layer Security (TLS) protocol could 
be leveraged to execute a Key Compromise Impersonation (KCI) attack, allowing a 
man-in-the-middle (MitM) attacker to take over client-side code running on a victim’s 
browser, intercept communications, arbitrarily replace Web site content, and perform 
actions on the victim’s behalf. 

Source: http://www.securitvweek.com/tls-communications-exposed-kci-attacks- 
researchers 
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Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 



Communications Sector 

23. September 14, WOWK 13 Huntington - (West Virginia) Copper theft impacts 
hundreds of Frontier customers. A Frontier Communication official reported that 
approximately 600 customers in Kanawha County, West Virginia, were left without 
Internet and phone service September 14 following a September 7 incident in which 
thousands of copper cables were stolen and fiber cables cut. An investigation is 
ongoing to find the culprit. 

Source: http://www.wowktv.com/storv/30028859/copper-theft-impacts-hundreds-of- 
frontier-customers 



Commercial Facilities Sector 

24. September 14, Bay City News - (California) Fire at Santa Rosa Junior College 
causes $500,000 in damage. A September 14 fire heavily damaged a one-story 
building that contains heating and cooling system at the Santa Rosa Junior College in 
California, causing an estimated $500,000 in damages. The cause of the fire is under 
investigation. 

Source: http://abc7news.com/news/fire-at-santa-rosa-iunior-college-causes-$500k-in- 
damage/984003/ 

25. September 14, WLBT 3 Jackson - (Mississippi) Employee embezzlement a problem 
for Madison Home Depot. Three employees of the Madison Home Depot store were 
arrested September 14 for allegedly embezzling over $1,000 since February 2014 after 
an on-going investigation revealed fraudulent customer sales orders and invoices were 
generated by several employees for merchandise in the store while other accomplices 
would accept the stolen merchandise. Further charges of embezzlement are still being 
investigated. 

Source: http://www.msnewsnow.com/storv/30029934/employee-embezzlement-a- 
problem-for-madison-home-depot 

26. September 13, WHDH 7 Boston; Sunbeam Television - (Massachusetts) Chelsea 
apartment evacuated after flooding. At least 150 people were evacuated from an 
apartment building in Chelsea, Massachusetts, September 12 after an opened valve 
flooded the complex and caused an estimated $400,000 in damages. An investigation is 
ongoing to determine who opened the valve. 

Source: http://www.whdh.com/storv/30017461/chelsea-apartment-evacuated-after- 
flooding 
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Dams Sector 



Nothing to report 
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Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 

About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday 
through Friday] summary of open-source published information concerning significant critical 
infrastructure issues. The DHS Daily Open Source Infrastructure Report is archived for 10 days on 
the Department of Homeland Security Web site: http://www.dhs.gov/lPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert. gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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